How many subprocessors does Customer.io use?

Customer.io lists 8 subprocessors on its published list, including Amazon Web Services, Google Cloud Platform, Snowflake, OpenAI, LLC, and Google Cloud (Vertex AI) and 3 more.

Where does Customer.io process customer data?

The subprocessors named by Customer.io are located in USA and EU, as stated on its list.

How quickly does Customer.io report a personal data breach to customers?

According to its DPA, Customer.io reports a personal data breach to customers without undue delay, with no set deadline: “Customer.io will notify Company without undue delay, but in any event within the time frame required by applicable Data Protection Law, of a Personal Data Breach affecting Personal Data Customer.io Processes in connection with the Services.”

How much notice does Customer.io give before adding a subprocessor?

Customer.io's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “notify Company (for which email will suffice) if it adds or changes Subprocessors at least then (10) calendar days prior to any such changes.”

How does Customer.io transfer personal data outside the EU?

Customer.io's DPA relies on standard contractual clauses: “For your convenience we have included the newest Standard Contractual Clauses (SCCs) within this document for co-execution.”

When was Customer.io's subprocessor list last checked?

ClauseTrail last checked Customer.io's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Customer.io adds or removes a subprocessor?

ClauseTrail monitors Customer.io's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Customer.io Subprocessors List (September 2026): Changes and History

Customer.io names 8 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Customer.io subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Cloud Hosting	USA, EU
2	Google Cloud Platform	Cloud Hosting, Analytics, AI	USA, EU
3	Snowflake	Data Warehousing, Analytics	USA, EU
4	OpenAI, LLC	AI model inference for optional AI-powered features	USA, EU
5	Google Cloud (Vertex AI)	AI model hosting and inference for optional AI-powered features	USA, EU
6	Anthropic (Claude)	AI model hosting and inference for optional AI-powered features	USA
7	Mailgun	Customer Communications	USA, EU
8	Twilio	Customer Communications*	USA

Get an email when Customer.io changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Customer.io free

Key DPA terms at Customer.io

What Customer.io's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Customer.io will notify Company without undue delay, but in any event within the time frame required by applicable Data Protection Law, of a Personal Data Breach affecting Personal Data Customer.io Processes in connection with the Services.”
DPA, customer.io ↗
Notice of a new subprocessor: 10 days ahead

“notify Company (for which email will suffice) if it adds or changes Subprocessors at least then (10) calendar days prior to any such changes.”
DPA, customer.io ↗
Transfers outside the EU: Standard contractual clauses

“For your convenience we have included the newest Standard Contractual Clauses (SCCs) within this document for co-execution.”
DPA, customer.io ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“upon termination or expiration of the Agreement, Customer.io will (at Company's election) delete (after providing Company the ability to download, pursuant to the Agreement) all Company Data (including copies) in its possession or control in accordance with Customer.io's retention and deletion policies.”
DPA, customer.io ↗
Audit rights: Once a year

“occur no more than once annually”
DPA, customer.io ↗

Documents we track for Customer.io

DPA: checked September 26, 2026 customer.io ↗
Privacy policy: checked September 26, 2026 customer.io ↗
Subprocessor list: checked September 26, 2026 customer.io ↗
Terms of service: checked September 26, 2026 customer.io ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Customer.io subprocessors FAQ

How many subprocessors does Customer.io use?: Customer.io lists 8 subprocessors on its published list, including Amazon Web Services, Google Cloud Platform, Snowflake, OpenAI, LLC, and Google Cloud (Vertex AI) and 3 more.
Where does Customer.io process customer data?: The subprocessors named by Customer.io are located in USA and EU, as stated on its list.
How quickly does Customer.io report a personal data breach to customers?: According to its DPA, Customer.io reports a personal data breach to customers without undue delay, with no set deadline: “Customer.io will notify Company without undue delay, but in any event within the time frame required by applicable Data Protection Law, of a Personal Data Breach affecting Personal Data Customer.io Processes in connection with the Services.”
How much notice does Customer.io give before adding a subprocessor?: Customer.io's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “notify Company (for which email will suffice) if it adds or changes Subprocessors at least then (10) calendar days prior to any such changes.”
How does Customer.io transfer personal data outside the EU?: Customer.io's DPA relies on standard contractual clauses: “For your convenience we have included the newest Standard Contractual Clauses (SCCs) within this document for co-execution.”
When was Customer.io's subprocessor list last checked?: ClauseTrail last checked Customer.io's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Customer.io adds or removes a subprocessor?: ClauseTrail monitors Customer.io's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.